Added resources for several roles mappings, which map AWS IAM roles to OpenSearch roles. For example, IAM role lambda_diff_import is currently mapped to an OpenSearch role called logstash.
📝 It would be nice to rename logstash so its usage is clear.
Still need to look into removing the es_master role and Cognito group memberships / permissions which should map to OpenSearch backend roles -- I think this already works and there's just cleanup and minor refactoring required.
Added an opensearch provider to the terraform.
Added resources for several roles mappings, which map AWS IAM roles to OpenSearch roles. For example, IAM role lambda_diff_import is currently mapped to an OpenSearch role called
logstash.Still need to look into removing the
es_masterrole and Cognito group memberships / permissions which should map to OpenSearch backend roles -- I think this already works and there's just cleanup and minor refactoring required.